Upload
vu-hai-quan
View
219
Download
4
Embed Size (px)
Citation preview
7/25/2019 MEN21 Project Test 1.4
1/60
7-6-2015 Nghim thu dch v cho d n
Confidential
NGHIM THU DCH V
Version
NGHIM THU DCH V CHOD N
Release
Version 1.3
a im : ..........................
Tnh : ...........................
Mrng mng MAN-Ethernet Cisco giai on2014-2015 cho mt sVin thng tnh, thnh
phthuc Tp on Bu chnh Vin thng VitNam
7/25/2019 MEN21 Project Test 1.4
2/60
7-6-2015 Nghim thu dch v cho d n 1
MC LC BI O
Kt qukim tra................................................................................. 2
1. Performance Test .......................................................................... 3
1.1. ISIS Convergence Test ........................................................................... 3
1.2. LDP Performance Test ............................................................................ 6
1.3. RVSP-TE Performance Test ................................................................... 9
2. Multicast Test............................................................................... 12
2.1. IGMP Test ............................................................................................. 12
2.2. PIM SSM ............................................................................................... 15
3. o kim cc dch vMAN-E ....................................................... 19
3.1. Dch vE-LINE lin tnh ........................................................................ 19
3.2. Dch vELAN lin tnh........................................................................... 23
3.3 Dch vHSIipDSLAM Access ............................................................. 27
3.4 Dch vIPTV-VoD .................................................................................. 30
3.5 Dch vVoIP .......................................................................................... 34
3.6 Dch vMobile Backhaul ........................................................................ 37
4. Service Protection ....................................................................... 41
5. QoS Test ....................................................................................... 44
6. Verify Security Configuration ..................................................... 50
7. IPv6 Test ....................................................................................... 53
IPv6 over L2VPN ......................................................................................... 53
IPv6 dual-stack ............................................................................................ 56
7/25/2019 MEN21 Project Test 1.4
3/60
7-6-2015 Nghim thu dch v cho d n 2
Kt qukim tra
STT Tn bi o K t qu Ghi ch
1. Performance Test
1.1. ISIS Convergence Test t Khng t Cha test
1.2. LDP Performance Test t Khng t Cha test
1.3. RVSP-TE Performance Test t Khng t Cha test
2. Multicast Test
2.1. IGMP Test t Khng t Cha test
2.2. PIM SSM t Khng t Cha test
3. o kim cc dch vMAN-E
3.1. Dch vE-LINE lin t nh t Khng t Cha test
3.2. Dch vE-LAN lin t nh t Khng t Cha test
3.3. Dch vHSI ipDSLAM Access t Khng t Cha test
3.4. Dch vIPTV-VoD t Khng t Cha test
3.5. Dch vVoIP t Khng t Cha test
3.6. Dch vMobile Backhaul t Khng t Cha test
4. Service Protection t Khng t Cha test
5. QoS Test t Khng t Cha test
6. Verify Security Configuration t Khng t Cha test
7. IPv6 Test
7.1. IPv6 over L2VPN t Khng t Cha test
7.2. IPv6 dual-stack t Khng t Cha test
7/25/2019 MEN21 Project Test 1.4
4/60
7-6-2015 Nghim thu dch v cho d n 3
1. Performance Test
1.1. ISIS Convergence Test
TEST SETUP
Mc ch bitest
Kim tra kh nng hi phc sau sc c a giao thc nh tuyn ISIS
M hnh mng
M t Giao thc nh tuyn IS-IS thc hin vic nh tuyn cc Router trn mng. Giao thc nhtuyn m bo vic hi phc mng trong thi gian ngn nht sau khi mng c s c .
Cc bc thc thi :
- Kim tra cc thng sc a giao thc nh tuyn ang chy trn thit b.
- Sd ng my o gi lu lng tng ng 1000packet/s
- Rt link kt ni gia Access v Core.
- Kim tra s lng packet loss sau khi mng hi phc.
- Kim tra thng tin nh tuyn ca Router sau khi mng hi phc.
Mu cu hnh - Trn ASR9k:router isis
set-overload-bit on-startup 180
7/25/2019 MEN21 Project Test 1.4
5/60
7-6-2015 Nghim thu dch v cho d n 4
is-type level-1
net 49.0092.1230.2906.0005.00
nsf ietf
lsp-gen-interval maximum-wait 5000 initial-wait 1 secondary-wait 50
lsp-refresh-interval 65000
max-lsp-lifetime 65535
address-family ipv4 unicastmetric-style wide
metric-style wide level 1
metric 100
ispf level 1
mpls traffic-eng level-1
mpls traffic-eng router-id Loopback0
mpls traffic-eng multicast-intact
spf-interval maximum-wait 50 initial-wait 5 secondary-wait 50
!
interface Loopback0
passive
address-family ipv4 unicast
tag 1000
!
!
interface TenGigE0/0/0/1
circuit-type level-1
point-to-point
hello-password keychain ISIS
address-family ipv4 unicast
!
!
interface TenGigE0/1/0/0
circuit-type level-1
point-to-pointhello-password hmac-md5 encrypted 0130322B
address-family ipv4 unicast
!
!
interface TenGigE0/1/0/1
circuit-type level-1
point-to-point
hello-password hmac-md5 encrypted 0130322B
address-family ipv4 unicast
!
!
interface TenGigE0/1/0/2
circuit-type level-1point-to-point
hello-password hmac-md5 encrypted 0130322B
address-family ipv4 unicast
!
- Trn UPE Router 7600:
interface GigabitEthernet1/0/1mtu 1560ip address 24.0.0.2 255.255.255.0ip router isisipv6 address 192:168:2::1/64
ipv6 router isis
7/25/2019 MEN21 Project Test 1.4
6/60
7-6-2015 Nghim thu dch v cho d n 5
no mls qos trustmpls ipisis circuit-type level-1isis network point-to-pointendrouter isisnet 49.0001.0020.0200.2002.00
is-type level-1passive-interface Loopback0!address-family ipv6redistribute connected
exit-address-family!
My o 01 my o truyn lu lng
01 my o Loopback u xa.
Ngi test CTIN:
02 k s ti 2 u.
Thng stest Ngy thc hin
Trm
Thit b
Kt qu
mong mun
- Router c li bng nh tuyn nh trc khi xy ra s c .
- Thi gian hi tc a mng 150ms
Kt qu
nh gi t Khng t t 1 phn Khng test
Chi ch:
Xc nhn Ngy thng nm .
I DIN CT-IN
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
7/25/2019 MEN21 Project Test 1.4
7/60
7-6-2015 Nghim thu dch v cho d n 6
1.2. LDP Performance Test
Mc ch bi test Ki m tra nng lc chuyn mch MPLS LDP ca h th ng
M hnh mng
M t - Cu hnh cc thit b trong m ng chy MPLS, dng giao thc LDP lm nhim vtrao i nhn.
- TTester 1, g i traffic IP n Tester 2 vi cc thng s:
o Tc : 500Mbps.
o SA/DA : theo ti liu hng dn nh km. o MTU : 1500 bytes.
- Kim tra cc thng strn tester.
Mu cu hnh - Trn ASR9k:mpls ldp
log
adjacency
neighbor
!
graceful-restart
discoverytargeted-hello interval 30
!
router-id 123.29.60.5
session protection
address-family ipv4
neighbor 123.29.60.1 targeted
neighbor 123.29.60.4 targeted
neighbor 123.29.60.15 targeted
!
interface tunnel-te101
!
interface tunnel-te102
7/25/2019 MEN21 Project Test 1.4
8/60
7-6-2015 Nghim thu dch v cho d n 7
!
interface tunnel-te301
!
interface tunnel-te302
!
interface TenGigE0/0/0/0
!interface TenGigE0/0/0/1
!
- Trn UPE:mpls ipmpls label protocol ldpmpls ldp router-id loopback0!mpls ldp logging neighbor-changes!mpls ldp neighbor passwordint TenGigabitEthernet x/xmpls ip
Phng tin o AGILENT N2X
Ngi test CTIN:
01 k s CTIN/1 thit b
Thng stest Ngy thc hin
Trm
Thit b
Kt qu
mong mun
- Trn Router nhn thy c cc MPLS LDP Neigborshow mpls ldp neighbor
- C y cc Interface ch y MPLSshow mpls interfaces
- Bng forwarding-table: a ra y thng tin v b ng FIB.show mpls forwarding
- Bng LFIB
- show mpls ldp bindings- Traffic gi tTester 1 sang tester 2 g i nhn thnh cng.- Thng s lu lng ghi nhn:
o Packet loss:
7/25/2019 MEN21 Project Test 1.4
9/60
7-6-2015 Nghim thu dch v cho d n 8
Chi ch:
Xc nhn Ngy thng nm .
I DIN CT-IN
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI IDIN
7/25/2019 MEN21 Project Test 1.4
10/60
7-6-2015 Nghim thu dch v cho d n 9
1.3. RVSP-TE Performance Test
Mc ch bi
test
Kim tra nng lc truyn ti lu lng qua ng hm sd ng RVSP-TE Tunnel.
M hnh mng
M t - Cu hnh 1 dch vEPL gi a MAN-Access1 v MAN-E Access2.
- Cu hnh kch hot tnh nng MPLS-TE trn cc Router.
- To 1 tunnel t Access1 n Access 2.
-
Kim tra thng sc a Tunnel c to, sd ng lnh :show interface tunnel- TTester 1, g i traffic IP n Tester 2 vi cc thng s:
o Tc : 500Mbps.
o SA/DA : theo ti liu hng dn nh km.
o MTU : 1500 bytes.
- Kim tra cc thng strn tester.
Mu cu hnh - Trn ASR9k:interface tunnel-te101description ASR-T101-P-TO-AGG01ipv4 unnumbered Loopback0autoroute announce
!destination 123.29.60.1fast-reroutepath-option 10 explicit name ASR-T101-P-TO-AGG01logging events link-status!
explicit-path name ASR-T101-P-TO-AGG01index 1 next-address strict ipv4 unicast 192.168.24.2!
interface tunnel-te301description ASR-T301-B-TO-AGG01
7/25/2019 MEN21 Project Test 1.4
11/60
7-6-2015 Nghim thu dch v cho d n 10
ipv4 unnumbered Loopback0destination 123.29.60.1path-option 10 explicit name ASR-T301-B-TO-AGG01logging events link-status!
explicit-path name ASR-T301-B-TO-AGG01
index 1 exclude-address ipv4 unicast 192.168.24.2!
- Trn UPE:
Phng tin o AGILENT N2X
Ngi test CTIN:
01 k s CTIN/1 thit b
Thng stest Ngy thc hin
Trm
Thit b
Kt qu
mong mun
- Interface c to c trng thi up.
- Traffic gi tTester 1 sang tester 2 g i nhn thnh cng.
- Thng s lu lng ghi nhn:
o Packet loss:
7/25/2019 MEN21 Project Test 1.4
12/60
7-6-2015 Nghim thu dch v cho d n 11
nh gi t Khng t t 1 phn Khng test
Chi ch:
Xc nhn Ngy thng nm .
I DIN CT-IN
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
7/25/2019 MEN21 Project Test 1.4
13/60
7-6-2015 Nghim thu dch v cho d n 12
2. Multicast Test
2.1. IGMP TestMc ch bitest
Kim tra tnh nng nhn bn tin IGMP v2/v3 ca Router ASR9k
M hnh mng
Cc bc thchin
- Cu hnh kch hot cc giao thc PIM trn cc Router trong mng MANE.
- Ttester 1, g i bn tin IGMPv2 v IGMPv3 join n ASR9k router.
- Kim tra cc cc host join IGMP trn ASR9k Router.
- Ttester 1, g i bn tin IGMPv2 v IGMPv3 leave n ASR9k Router.
Cu hnh mu - Trn ASR9k:multicast-routing
address-family ipv4ssm range 123interface all enable
!!router pimaddress-family ipv4interface TenGigE0/1/0/1enable
!interface TenGigE0/1/0/2enable
!!router igmpinterface GigabitEthernet0/0/1/8.10version 2
!router isis danangaddress-family ipv4 unicastmpls traffic-eng multicast-intact
My o Agilent N2X, PC
Ngi test
Thng stest Ngy thc hin
7/25/2019 MEN21 Project Test 1.4
14/60
7-6-2015 Nghim thu dch v cho d n 13
Trm
Thit b
Kt qu
mong mun
- Kim tra thng strn interface c n c thng tin vIGMP enable:
RP/0/RSP0/CPU0:ASR#show igmp interface gi0/0/1/8.10Mon Mar 9 06:25:18.491 UTC
GigabitEthernet0/0/1.8.10 is up, line protocol is upIGMP is enabled on interfaceCurrent IGMP version is 2IGMP query interval is 60 secondsIGMP querier timeout is 125 secondsIGMP max query response time is 10 secondsLast member query response interval is 1 secondsIGMP activity: 6 joins, 0 leavesIGMP querying router is 123.29.60.5 (this system)Time elapsed since last query sent 00:00:12Time elapsed since IGMP router enabled 08:21:24
Time elapsed since last report received 00:00:03
- Khi Tester 1 gi IGMPv2 join, trn ASR cn nhn thy host join:RP/0/RSP0/CPU0:ASR#show igmp groupsMon Mar 9 06:35:20.838 UTCIGMP Connected Group MembershipGroup Address Interface Uptime ExpiresLast Reporter232.2.2.2 Loopback0 08:31:26 never123.29.60.5232.2.2.102 Loopback0 08:31:26 never123.29.60.5224.0.0.2 TenGigE0/1/0/1 05:21:44 never
192.168.34.4224.0.0.13 TenGigE0/1/0/1 05:21:44 never
Khi Tester 1 gi IGMPv3 join, trn U-PE cn nhn thy host join vicp S,G tng ng
RP/0/RSP0/CPU0:ASR#show igmp groupsMon Mar 9 06:35:20.838 UTCIGMP Connected Group MembershipGroup Address Interface Uptime ExpiresLast Reporter232.2.2.2 Loopback0 08:31:26 never123.29.60.5232.2.2.102 Loopback0 08:31:26 never
123.29.60.5224.0.0.2 TenGigE0/1/0/1 05:21:44 never192.168.34.4224.0.0.13 TenGigE0/1/0/1 05:21:44 never
- Sau khi tester gi IGMP leave,trn Router s khng thy host join na
Kt qu
nh gi t Khng t t 1 phn Khng test
7/25/2019 MEN21 Project Test 1.4
15/60
7-6-2015 Nghim thu dch v cho d n 14
Ghi ch:
Xc nhn Ngy thng nm .
I DIN CT-IN
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
7/25/2019 MEN21 Project Test 1.4
16/60
7-6-2015 Nghim thu dch v cho d n 15
2.2. PIM SSM
Mc ch bi
test
Kim tra giao thc PIM SM chy trn Router.
M hnhmng
Cc bcthc hin
- Kch hot giao thc PIM SM trn cc Router trong mng.
- Khng sd ng Router no lm RP
- Cu hnh Access List 10 cho di Multicast SSM.- Trn Tester 1, gil p host join vo Source v group (source, 232.0.0.1) theo VLAN
dnh ring cho Multicast c to sn.
- Trn Tester 2, gi traffic n group 232.0.0.1. Thng straffic :
o Speed : 800Mbps
o MTU : 1344 bytes.
- Kim tra thng tin vgiao th c PIM SSM trn cc Router trong mng (ng i,RPF).
- Kim tra kt qutruy n lu lng trn my o.
Cu hnhmu -
Trn U-PE Node:
Interface-Facing DSLAM
!
Ip multicast-routing
ip multicast multipath
!
ip igmp ssm-map enable
no ip igmp ssm-map query dns
ip pim range 10
!
access-list 10 permit 232.1.0.0 0.0.255.255!
!802.1Q facing port single tag packet
!
interface GigabitEthernet3/0/4
mtu 9000
no ip address
logging event link-status
speed nonegotiate
spanning-tree portfast trunk
spanning-tree bpdufilter enable
7/25/2019 MEN21 Project Test 1.4
17/60
7-6-2015 Nghim thu dch v cho d n 16
!
service instance 120 ethernet
description EFP for Video Service
encapsulation dot1q 120
rewrite ingress tag pop 1 symmetric
bridge-domain 517 split-horizon!
!QinQ facing port double tag packets
!
interface GigabitEthernet3/0/5
mtu 9000
no ip address
logging event link-status
speed nonegotiate
spanning-tree portfast trunk
spanning-tree bpdufilter enable
!
service instance 120 ethernet
description EFP for Video Service
encapsulation dot1q 120
rewrite ingress tag pop 1 symmetric
bridge-domain 527 split-horizon
!
!
Bridge Domains
!
vlan 517
vlan 527
!
interface Vlan517
description DSLAM1 Trunk Video Edge
mtu 9000
ip dhcp relay information trusted
ip address
ip helper-address
no ip unreachables
ip pim sparse-mode
ip multicast limit out
ip access-group 150 in
!
!
interface Vlan527
description DSLAM2 Trunk Video Edge
mtu 9000
ip dhcp relay information trusted
ip address
ip helper-address
no ip unreachables
ip pim sparse-mode
7/25/2019 MEN21 Project Test 1.4
18/60
7-6-2015 Nghim thu dch v cho d n 17
ip multicast limit out
ip access-group 150 in
!
IGP Injection
!
router isis danangpassive-interface vlan517
passive-interface vlan527
!
- Trn ASR 9k:multicast-routingaddress-family ipv4interface all enable
!!
router pimaddress-family ipv4interface TenGigE0/1/0/1enable
!interface TenGigE0/1/0/2enable
!
My o Agilent N2X
Ngi test
Thng stest Ngy thc hin
Trm
Thit b
Tham s1
Kt qu
mong mun
Kim tra giao thc PIM trn cc Routershow ip pim interfaceshow ip mroute 232.0.0.1(3.0.3.3, 232.0.0.1), 00:16:50/00:02:56, flags: JT
Incoming interface: TenGigabitEthernet1/0/0, RPF nbr 192.168.14.1, RPF-MFDOutgoing interface list:
Vlan30, Forward/Sparse, 00:16:50/00:02:07, H
Kt qu lu lng truyn gia cc tester phi p ng:
- Packet Loss: 0 packet loss.
- Latency
7/25/2019 MEN21 Project Test 1.4
19/60
7-6-2015 Nghim thu dch v cho d n 18
Ghi ch:
Xc nhn Ngy thng nm .
I DIN CT-IN
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
7/25/2019 MEN21 Project Test 1.4
20/60
7-6-2015 Nghim thu dch v cho d n 19
3. o kim cc dch vMAN-E
3.1. Dch vE-LINE lin tnh
Mc ch bitest
o kim dch vE-LINE lin t nh
M hnh mng
My o
Ngi test
Thng stest Ngy thc hin
Trm
Thit b
Cc bc thchin
Cu hnh dch vE-LINE lin t nh
1. Trn MAN-E (thc hin bi VNPT tnh v CTIN)- Cu hnh Pseudowire EoMPLS thnh t tU-PE 1 t i ASR-1- Cu hnh Pseudowire EoMPLS thhai t U-PE 2 t i ASR-2
7/25/2019 MEN21 Project Test 1.4
21/60
7-6-2015 Nghim thu dch v cho d n 20
2. Trn VN2 core: (thc hin bi VTN)- Cu hnh knh Layer2 gia PE1 v PE2
Test dch v E-LINE
3. Kim tra EoMPLS
Trn UPE:Show mpls l2transport vc Show mpls l2transport vc detail
Trn ASR 9k:Show l2vpn xconnect pw-id Show l2vpn xconnect pw-id detail
4. Kim tra thng schuy n cc gi tin kch ckhc nhau gi a Tester 1 v Tester 2
t tc trn link c a UPE Router ni n my o l 1Gbps.Thc hin truyn lu lng gia Tester 1 v Tester 2, s d ng cc tc 75%, x%,100% vi cc kch ckhc nhau: 64, 512, 1024, 1500, 2048. Trong x% l tcm t i , packet loss =0. Thi lng cho mi tc l 90s.Ghi li kt qu nh bng di:
Tc
Frame s ze75% x% 100%
64latencyPacket loss
jitter75% x% 100%
512latencyPacket lossjitter
75% x% 100%
1024latencyPacket lossjitter
75% x% 100%
1500
latency
Packet lossjitter75% x% 100%
2048latencypacket lossjitter
5. Kim tra vic p dng cc policy-map trn router
show policy-map interface
7/25/2019 MEN21 Project Test 1.4
22/60
7-6-2015 Nghim thu dch v cho d n 21
6. Kim tra thng sCPU trn thi t b:
show process cpu
Cu hnh mu - U-PE Router
Policy-map 5M
Class class-default
Police 5000000
Interface gi1/0/0
Description Connect to Tester
service instance 100 ethernet
encapsulation default
xconnect 100 encapsulation mpls
service-policy input 5M
- ASR Router
interface GigabitEthernet0/0/1/0.100 l2transport
encapsulation dot1q 100
!
l2vpn
xconnect group E-LINE
p2p E-LINE
interface GigabitEthernet0/0/1/0.100
neighbor ipv4 pw-id 100
!
Kt qumong mun
1. Cc EoMPLS PW u tr ng thi UP
2. Tc truy n thng cc loi gi tin gia Tester 1 v Tester 2 c m bo nhcu hnh ca tng gi cc:
Tc
Frame size75% x% 100%
64 latency
7/25/2019 MEN21 Project Test 1.4
23/60
7-6-2015 Nghim thu dch v cho d n 22
1500latency
7/25/2019 MEN21 Project Test 1.4
24/60
7-6-2015 Nghim thu dch v cho d n 23
3.2. Dch vELAN lin tnh
Mc ch bi
test
o kim dch vELAN lin t nh
M hnh mng
My o
Ngi test
Thng stest Ngy thc hin
Trm
Thit bCc bc thchin
Cu hnh dch vE-LAN gi a Tester 1, Tester 2 v Tester 3 (VT tnh v CTINthc hin)
1. To kt ni nh s m ng2. Cu hnh dch vE-LAN theo ki n trc H-VPLS. ASR-1 khi to VFI. U-PE 1, U-
PE 2, U-PE 3 xconnect ti ASR-1 v Pe-Agg-2 Router3. Disable tnh nng split horizon cho EoMPLS gia ASR-1 v U-PE 1, gia ASR-1
v U-PE 3, gia Pe-Agg-2 v U-PE 24. Cu hnh a ch 3 Tester n m trong cng 1 Subnet
7/25/2019 MEN21 Project Test 1.4
25/60
7-6-2015 Nghim thu dch v cho d n 24
Cu hnh knh Layer 2 gia PE-1 v PE-2 (VTN thc hin)1. Cu hnh knh Layer2 trn VN2 Core, truyn ti VLAN t MAN-E 1 sang MAN-E
2
Test dch v E-LAN
1. Kim tra EoMPLS
Trn UPE:Show mpls l2transport vc Show mpls l2transport vc detail
Trn ASR9k:Show l2vpn bridge-domain pw-id
Show l2vpn bridge-domain pw-id detail
2. Kim tra thng schuy n cc gi tin kch ckhc nhau gi a 3 Tester 1
t tc trn link c a UPE Router ni n my o l 1Gbps.Thc hin truyn lu lng gia t tester 1 n Tester 2 v Tester 3, sd ng cctc 75%, x%, 100% v i cc kch c khc nhau: 64, 512, 1024, 1500, 2048.Trong x% l tc m t i , packet loss =0, latency n nh. Thi lng chomi tc l 90s.Ghi li kt qu nh bng di:
Tc
Packet Size75% x% 100%
64latencypacket lossjitter
75% x% 100%
512latencypacket lossjitter
75% x% 100%
1024latencypacket lossjitter
75% x% 100%
150latencypacket lossjitter
75% x% 100%
2048latencypacket lossjitter
3. Kim tra vic hc a ch MAC trn ASR-1Show mac-accounting
7/25/2019 MEN21 Project Test 1.4
26/60
7-6-2015 Nghim thu dch v cho d n 25
4. Kim tra thng sCPU trn thi t bshow process cpu
Cu hnh mu - U-PE 1 & U-PE 3 RouterInterface gi1/0/0Description Connect To Testerservice instance 100 ethernet
encapsulation defaultxconnect 100 encapsulation mpls
- ASR-1 Router
interface GigabitEthernet0/0/1/0.100 l2transport
encapsulation dot1q 100
rewrite ingress tag pop 1
!
l2vpn
bridge group E-LAN-100
bridge-domain 100
int gigabitE0/0/1/0.100
vfi E-LAN-100
neighbor pw-id 100
neighbor pw-id 100
- U-PE 2 Router
Interface gi1/0/0Description Connect To Tester 2service instance 100 ethernetencapsulation defaultxconnect 100 encapsulation mpls
- PE-AGG 2 Router
Interface gi1/0/0Description Connect To PE2service instance 100 ethernetencapsulation dot1q 100rewrite ingress tag pop 1 symmetricxconnect 100 encapsulation mpls
Kt qu
mong mun
1. Cc EoMPLS PW u tr ng thi UP
2. Tc truy n thng cc loi gi tin gia Tester 1 v Tester 2 c m bo nhtrong bng:
Tc
Packet Size75% x% 100%
64latency
7/25/2019 MEN21 Project Test 1.4
27/60
7-6-2015 Nghim thu dch v cho d n 26
512latency
7/25/2019 MEN21 Project Test 1.4
28/60
7-6-2015 Nghim thu dch v cho d n 27
3.3 Dch vHSIipDSLAM Access
Mc ch bitest
o kim dch vHSI ipDSLAM AccessGil p vic ngt kt ni gia PE-AGG v BRAS
M hnh mng
My o
Ngi test
Thng stest Ngy thc hin
Trm
Thit b
Cc bc thchin
Cu hnh dch vHSI
1. To kt ni nh s m ng2. Cu hnh cng kt ni tU-PE xu ng DSLAM3. Cu hnh Pseudowire gia U-PE v ASR-1, backup peer ti PE-AGG 24. Cu hnh DSLAM (phi hp vi VT tnh)5. Thit lp PPPoE t PC16. Cu hnh chng thc v thit lp PPPoE trn BRAS 1 (phi hp vi VT tnh)
Test dch v HSI
7/25/2019 MEN21 Project Test 1.4
29/60
7-6-2015 Nghim thu dch v cho d n 28
1. Kim tra Pseudowire. ng primary tr ng thi UP v ng backup tr ng thiSTANDBYU-PE#show mpls l2 vc 110
Local intf Local circuit Dest address VC ID
Status------------- -------------------------- --------------- ----------
----------
Gi4/20 Eth VLAN 110 3.3.3.3 110
UP
Gi4/20 Eth VLAN 110 4.4.4.4 110
STANDBY
2. Kim tra kt ni tPC ra internet
Thc hin truy nhp vo cc trang web interface tPC
3. Kim tra tc d ch vHSI
Trn PC thc hin download & upload file tFTP server. Ghi l i kt qu v t c download & upload
Test dphng khi c s c v i PE-AGG 1
1. Ngt kt ni primary hng U-PE ti ASR-1 bng cch shutdown Service Instancetrn ASR-1. Kim tra kt ni backup ti PE-AGG2
ASR-1(config)#int gi 4/20
ASR-1 (config-if)#service instance 110 ethernet
ASR-1 (config-if-srv)#shut
U-PE#show mpls l2 vc 110
Local intf Local circuit Dest address VC ID
Status
------------- -------------------------- --------------- ----------
----------
Gi4/20 Eth VLAN 110 3.3.3.3 110
DOWN
Gi4/20 Eth VLAN 110 4.4.4.4 110
UP
2. Kim tra kt ni tPC ra internet
3. Kim tra tc d ch vHSI
Trn PC thc hin download & upload file tFTP server. Ghi l i kt qu v t c download & upload
Cu hnh mu - U-PE Router
Interface gi4/20
Description Connect to Tester
service instance 100 ethernet
encapsulation dot1q 100
rewrite ingress tag push dot1q 100
7/25/2019 MEN21 Project Test 1.4
30/60
7-6-2015 Nghim thu dch v cho d n 29
xconnect 100 encapsulation mpls
backup peer 100
- ASR-1 Router
interface GigabitEthernet0/0/1/0.100 l2transport
encapsulation dot1q 100
!
l2vpn
xconnect group HSI
p2p HSI
interface GigabitEthernet0/0/1/0.100
neighbor ipv4 pw-id 100
!
- PE-AGG 2 Router
Interface gi9/20
Description Connect to BRAS
service instance 100 ethernet
encapsulation dot1q 100
xconnect 100 encapsulation mpls
Kt qu
mong mun
1. PC c thtruy nh p internet
2. Tc download, upload c a PC t tc cho php c a gi cc.
Kt qu
nh gi t Khng t t 1 phn Khng test
Ghi ch:
Xc nhn Ngy thng nm .
I DIN CT-IN
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
7/25/2019 MEN21 Project Test 1.4
31/60
7-6-2015 Nghim thu dch v cho d n 30
3.4 Dch vIPTV-VoD
Mc ch bi
test
o kim dch vIPTV, VoD.
Gil p vic ngt kt ni gia ASR-1 v PE1
M hnh mng
My o
Ngi test
Thng stest Ngy thc hin
Trm
Thit b
Cc bc thchin
Cu hnh dch vMulticast IPTV, VoD VASC
1. To kt ni nh s m ng. Chun b Modem, Setopbox v TV.2. Cu hnh PIM SSM gia cc Router thuc mng MAN-E v mng VN23. Cu hnh VRRF gia PE1 v PE2 (phi hp vi VTN)4. Cu hnh ELAN gia U-PE, ASR-1 v PE-AGG2 cho dch vVoD. VFI t ti U-
PE.5. Cu hnh Interface kt ni t UPE xu ng iPDSLAM bt lu lng VoD v
Multicast6. Cu hnh IPTV cho DSLAM (phi hp vi VT tnh) vi bng thng quy hoch cho
dch vIPTV.7. Cu hnh Modem, STB (phi hp vi VT tnh chun b account test)
Test dch vMulticast IPTV
1. Kim tra PIM SSM
Trn UPE:
Show ip pim neighbor
7/25/2019 MEN21 Project Test 1.4
32/60
7-6-2015 Nghim thu dch v cho d n 31
Trn ASR:Show pim neighbor
2. Kim tra bng nh tuyn multicast
Trn UPE:Show ip mroute
Trn ASR:Show mrib route
3. Test xem cc knh Multicast, VoD v kim tra cht lng hnh nh.
Test dphng d ch v VoD khi c s c v i PE-AGG 1
1. Ngt kt ni hng U-PE ti ASR-1 bng cch shutdown sub-interface trn PE-AGG1. Kim tra kt ni ti PE-AGG2
ASR-1(config)#interface GigabitEthernet0/0/1/10.100 PE-AGG1ASR-1(config-subif)#shut
U-PE#show mpls l2 vc 100
2. Test xem cc knh VoD v kim tra cht lng hnh nh.
Cu hnh mu - U-PE Router
Interface gi1/0/0Description Connect to ipDSLAMservice instance 99 ethernet
encapsulation dot1q 99rewrite ingress tag pop 1 symmetricbridge-domain 99 split-horizon
service instance 100 ethernetencapsulation dot1q 100bridge-domain 100 split-horizon
vlan 100name VoD-100
interface Vlan100
mtu 9000no ip addressxconnect vfi VOD_VASC_TEST
l2 vfi VOD_VASC_TEST manualvpn id 100neighbor encapsulation mpls no-split-horizonneighbor encapsulation mpls no-split-horizon
vlan99name IPTV-99
interface Vlan99mtu 9000ip unnumbered Loopback0
7/25/2019 MEN21 Project Test 1.4
33/60
7-6-2015 Nghim thu dch v cho d n 32
ip pim sparse-modeip igmp version 3
ip igmp ssm-map enableip igmp ssm-map static SSM-MAP 123.29.128.4
ip access-list standard SSM-MAP
permit 232.84.1.0 0.0.0.255
- ASR-1 Router
interface GigabitEthernet0/0/1/0.100 l2transport
encapsulation dot1q 100
!
l2vpn
xconnect group VOD_VASC_TEST
p2p VOD_VASC_TEST
interface GigabitEthernet0/0/1/0.100
neighbor ipv4 pw-id 100
!
- PE-AGG 2 Router
Interface gi1/0/0Description Connect to PE 2service instance 100 ethernetencapsulation dot1q 100
xconnect 100 encapsulation mpls
Kt qu
mong mun
1. Cc Router trong mng MAN-E thit lp PIM neighbour2. Bng mroute cha y thng tin v cc tuy n ng ti cc multicast group3. Xem IPTV hnh nh r nt, khng git hnh, chuyn knh nhanh.4. Xem VoD hnh nh r nt, khng git hnh.5. Khi ngt kt ni hng ASR-1, dch vVoD v n chy tt qua hng PE-AGG2
Kt qu
nh gi t Khng t t 1 phn Khng test
Ghi ch:
Xc nhn Ngy thng nm .
I DIN CT-IN
CHC DANH
Ngy thng . nm
I DIN VNPT
CHC DANH
Ngy thng . nm
I DIN VNPT
CHC DANH
7/25/2019 MEN21 Project Test 1.4
34/60
7-6-2015 Nghim thu dch v cho d n 33
TN NGI I DIN TN NGI I DIN TN NGI I DIN
7/25/2019 MEN21 Project Test 1.4
35/60
7-6-2015 Nghim thu dch v cho d n 34
3.5 Dch vVoIP
Mc ch bi
test
o kim dch vVoIP
M hnh mng
My o Agilent/HST3000
Ngi test
Thng stest Ngy thc hin
Trm
Thit b
Cc bc thchin
Cu hnh dch vVoIP
1. To kt ni nh s m ng. Tester 1 ng vai tr l Client, Tester 2 ng vai tr lVoice Server
2. Cu hnh EoMPLS gia U-PE 1 v ASR-13. Cu hnh MPLS L3 VPN gia PE1 v PE2 (thc hin bi VN2 Team)4. Cu hnh Tester1 trdefault gateway t i PE1, Tester 2 trdefault gateway t i PE2
7/25/2019 MEN21 Project Test 1.4
36/60
7-6-2015 Nghim thu dch v cho d n 35
Test dch v VoIP
1. Kim tra EoMPLS
Trn UPE:
Show mpls l2transport vc Show mpls l2transport vc detail
Trn ASR 9k:Show l2vpn xconnect pw-id Show l2vpn xconnect pw-id detail
2. Gi l p lu lng Voice gi n gia 2 Tester vi cc thng s:- Speed: 5M- MTU: 98bytes.
o kim cc thng s: Latency, Frame Loss, Jitter.3. Trn PC, s d ng phn mm Softphone (VD: X-Lite, Kapanga) gia 2 PC th . o
kim thng scu c gi VoIP (MOS) nu c.
Cu hnh mu - U-PE Router
Interface gi1/0/0Description Connect to Testerservice instance 100 ethernetencapsulation defaultxconnect 100 encapsulation mpls
- ASR-1 Router
interface GigabitEthernet0/0/1/0.100 l2transportencapsulation dot1q 100
!
l2vpn
xconnect group VoIP
p2p VoIP
interface GigabitEthernet0/0/1/0.100
neighbor ipv4 < MAN-E Access > pw-id 100
!
Kt qu
mong mun
1. Cc EoMPLS PW u tr ng thi UP2. 2 my o gi v nhn lu lng thnh cng.- Latency
7/25/2019 MEN21 Project Test 1.4
37/60
7-6-2015 Nghim thu dch v cho d n 36
Ghi ch:
Xc nhn Ngy thng nm .
I DIN CT-IN
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
7/25/2019 MEN21 Project Test 1.4
38/60
7-6-2015 Nghim thu dch v cho d n 37
3.6 Dch vMobile Backhaul
Mc ch bitest
m bo dch v c QoS vi cc gi tr c thit lp sn ca NodeB khi i qua mng.Hn chbng thng v m bo cht lng dch v.
M hnh mng
My o Agilent/HST3000
Ngi test
Thng stest Ngy thc hin
Trm
Thit b
Cc bc thchin Cu hnh dch vMobile Backhaul
1. To kt ni nh s m ng. Tester 1 ng vai tr l NodeB, Tester 2 ng vai trl RNC
2. Cu hnh Switch truy n ti lu lng Vlan tTester U-PE3. Cu hnh Pseudowire theo m hnh VFI gia UPE v ASR-14. Cu hnh L2VPN gia PE1 v PE2 (thc hin bi VN2 Team)
7/25/2019 MEN21 Project Test 1.4
39/60
7-6-2015 Nghim thu dch v cho d n 38
5. Trn PE Cu hnh trust qos cc port u ni xung MAN-E v RNC (thc hin biVN2 Team)
Test dch v Mobile Backhaul
1. Kim tra EoMPLS
Trn UPE:Show mpls l2transport vc Show mpls l2transport vc detail
Trn ASR 9k:Show l2vpn xconnect pw-id Show l2vpn xconnect pw-id detail
2. p policy gii hn bng thng v cu hnh trust port vo interface xung testermls qosmls qos marking ignore port-trust!
policy-map policing_3G_10M_inclass class-defaultpolice cir 10000000 conform-action transmit exceed-action drop
!
3. Gi l p lu lng Data gi t Tester 1 n Tester 2. Bn 8 lung traffic vi thngs:
- CoS: 0-7
- Bandwidth: 2 MB/traffic- Vlan:100
4. Kim tra trn UPE: lu lng c QoS ca MAN-E x l theo ng vi gi trCoS m Tester 1 gi ln. Gi trCoS Tester g i ln tng ng vi gi tr EXP QoStrong mng. Bng thng gii hn 10MB
Show policy-map interface gigabitethernet1/0/0
Show policy-map interface Tengigabitethernet1/0/0
Kim tra trn Tester2 lu lng nhn c l ~ 10MB
7/25/2019 MEN21 Project Test 1.4
40/60
7-6-2015 Nghim thu dch v cho d n 39
Cu hnh mu - U-PE Router
mls qosmls qos marking ignore port-trust!policy-map policing_3G_10M_in
class class-defaultpolice cir 10000000 conform-action transmit exceed-action drop
!vlan 100name Test 3G
!Interface gix/x/xdescription Connect to Tester1
mls qos trustservice instance 100 ethernetencapsulation dot1q 100bridge-domain 100service-policy input policing_3G_10M_in
!l2 vfi mobile_backhaulvpn id 100neighbor encapsulation mpls no-split-horizon
!interface vlan 100description for 3Gno ip addressno shutxconnect vfi mobile_backhaul
!
- ASR-1 Router
interface GigabitEthernet0/0/1/0.100 l2transport
encapsulation dot1q 100
!
l2vpn
bridge group mobile_backhaul
7/25/2019 MEN21 Project Test 1.4
41/60
7-6-2015 Nghim thu dch v cho d n 40
bridge-domain 100
int gigabitE0/0/1/0.100
vfi E-LAN-100
neighbor pw-id 100
Kt qu
mong mun
1. Cc EoMPLS PW u tr ng thi UP2. 2 my o gi v nhn lu lng thnh cng. Lu lng truyn i trn Tester 1 l
16MB, lu lng nhn vtrn tester 2 l 10MB- Latency
7/25/2019 MEN21 Project Test 1.4
42/60
7-6-2015 Nghim thu dch v cho d n 41
4. Service ProtectionMc ch bitest
o kim kh nng bo v d ch vb ng tnh nng MPLS TE FRR
M hnh mng
My o
Ngi test
Thng stest Ngy thc hin
TrmThit b
Cc bc thchin
Cu hnh link protection cho ring gm 5 thit b: ASR-1, PE-AGG 2, UPE 1, UPE2, UPE 3
1. To kt ni nh s m ng2. Cu hnh cc primary tunnel & backup tunnel nh b ng di y
Link Traffic Flow Primary Tunnel Backup Tunnel
7/25/2019 MEN21 Project Test 1.4
43/60
7-6-2015 Nghim thu dch v cho d n 42
ASR-1PE-Agg 2ASR-1Pe-Agg 2 ASR-1 Pe-Agg 2
ASR-1UPE 1 UPE 2UPE 3 PE-Agg 2
PE-Agg 2ASR-1 PE-Agg 2 ASR-1PE-Agg 2UPE 3 UPE2UPE 1 ASR-1
PE-Agg 2UPE 3
PE-Agg2UPE 3 PE-Agg2 UPE 3PE-Agg 2ASR-1 UPE1UPE 2 UPE 3
UPE 3PE-Agg 2 UPE 3 PE-Agg 2 UPE 3UPE 2 UPE 1 ASR-1PE-Agg 2
UPE 3UPE 2 UPE 3 UPE 2 UPE 3 UPE 2UPE3PEAgg2 ASR1
UPE1 UPE2
UPE 2UPE 3 UPE 2 UPE 3UPE2UPE1 ASR1 PEAgg2UPE3
UPE 2UPE 1 UPE 2 UPE 1 UPE 2 UPE 1UPE2UPE3 PEAgg2
ASR1 UPE1
UPE 1UPE 2 UPE 1 UPE 2UPE1ASR1 PEAgg2
UPE3 UPE2
UPE 1ASR1 UPE 1 ASR1 UPE 1 ASR1UPE 1UPE 2 UPE 3 PE-Agg 2ASR1
ASR1UPE 1 ASR1 UPE 1ASR1PE-Agg 2 UPE3UPE 2 UPE 1
3. Cu hnh Pseudowire gia Tester 1 v Tester 24. Cu hnh a ch cho Tester 1 v Tester 2 n m trong 1 subnet
Test kh nng dphng cho link b ng TE FRR
1. Kim tra cc primary tunnel v backup tunnel
Trn UPE:show mpls traffic-eng tunnels tunnel
Trn ASR:show mpls traffic-eng tunnels
2. Kim tra d phng cho cc link b ng TE FRR
- Truyn lu lng gia Tester 1 v Tester 2 vi tc tng ng1000packet/s.
- Rt mt link bt k. V d: link gia U-PE 1 v ASR-1
- Kim tra spacket loss trn my o.
3. Kim tra ng i t UPE 1 t i ASR-1 lc rt linkUPE#Traceroute
Cu hnh mu - Tunnel c cu hnh sn trn mng. Kim tra li chnh xc cc Tunnel.
- Cu hnh Pseudowire gia Tester 1 v Tester 2- Trn UPE1 :
Interface gi 4/1
Service Instance 100 ethernet
Encapsulation dot1q 100
Xconnect 100 encapsulation mpls
7/25/2019 MEN21 Project Test 1.4
44/60
7-6-2015 Nghim thu dch v cho d n 43
- Trn ASR-1 :
interface GigabitEthernet0/0/1/0.100 l2transport
encapsulation dot1q 100
!
l2vpn
xconnect group Test
p2p Test
interface GigabitEthernet0/0/1/0.100
neighbor ipv4 < UPE loopback IP > pw-id 100
!
Kt qumong mun
1. Primary Tunnel v Backup Tunnel u tr ng thi UP. Backup Tunnel sn sang dphng cho Primary Tunnel
2. S lng packet loss < 50 packet lc rt link
Failed link Packet loss
U-PE 1ASR-1 < 50 packets
Kt qu
nh gi t Khng t t 1 phn Khng test
Ghi ch: 1 packet loss tng ng vi 1ms hi t.
Xc nhn Ngy thng nm .
I DIN CT-IN
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
7/25/2019 MEN21 Project Test 1.4
45/60
7-6-2015 Nghim thu dch v cho d n 44
5. QoS Test
Mc ch bitest
Kim tra vic cu hnh QoS trn mng
M hnh mng
My o Agilent N2X/HST3000
Ngi test
Thng stest Ngy thc hin
Trm
Thit b
Cc bc thchin
Cu hnh QoS trn cc U-PE Router
1. To kt ni nh s m ng2. Cu hnh QoS trn cc U-PE Router, cc tham s nh sau:
7/25/2019 MEN21 Project Test 1.4
46/60
7-6-2015 Nghim thu dch v cho d n 45
(tham chiu theo bng Quy nh ch tiu ch t lng mng)
3. Cu hnh dch vE-LINE gia Tester 1 v Tester 2. Sd ng 5 VLAN: 10, 20, 30,40, 50 tng ng vi 5 class b ng trn4. Cu hnh nh du lu lng trn MAN-E Access 2 Router theo bng sau:
VLAN MPLS EXP50 540 430 320 210 1
5. t a chcc knh E-LINE trn cc tester cng subnet
Test QoS
6. Kim tra cc class trn UPE 1Show class-map
7. Pht lu lng gia Tester1 v Tester 2 :pht 5 lung tng ng vi 5 vlan cgn gi tr EXP tng ng, cc gi tin c packet length ln lt l 64 bytes, 256bytes, 512 bytes, 1024 bytes, 1518 byte .
8. Thc hin truyn lu lng gia Tester 1, Tester 2 vi cc tham stheo b ng diy:
STT Kch thc gi tin Lu lng ca cc lung (Mbps)
1 64 10
2 2 6 10
3 512 10
4 1024 10
5 1518 10
7/25/2019 MEN21 Project Test 1.4
47/60
7-6-2015 Nghim thu dch v cho d n 46
9. Kim tra packet loss ca cc VLAN. Ghi li kt qu
VLAN Packet loss Latency Jitter50
40302010
Cu hnh mu Trn interface k t n i ti my o
interface GigabitEthernet x/ymtu 9000no ip addressservice instance 10 ethernetencapsulation dot1q 10service-policy input SET_EXP1
xconnect a.a.a.a 10 encapsulation mpls!service instance 20 ethernet
encapsulation dot1q 20service-policy input SET_EXP2xconnect a.a.a.a 20 encapsulation mpls
!service instance 30 ethernet
encapsulation dot1q 30service-policy input SET_EXP3xconnect a.a.a.a 30 encapsulation mpls
!service instance 40 ethernet
encapsulation dot1q 40service-policy input SET_EXP4
xconnect a.a.a.a 40 encapsulation mpls!service instance 50 ethernet
encapsulation dot1q 50service-policy input SET_EXP5xconnect a.a.a.a 50 encapsulation mpls
!
policy-map SET_EXP
class class-default
set mpls experimental imposition
ASR QoS 10GE configuration!
!class-map match-any CONTROLmatch cos 6 7match mpls experimental topmost 6 7match dscp ipv4 48match precedence ipv4 6 7
!!class-map match-any REAL-TIMEmatch cos 5match mpls experimental topmost 5match dscp ipv4 46match precedence ipv4 5
7/25/2019 MEN21 Project Test 1.4
48/60
7-6-2015 Nghim thu dch v cho d n 47
!class-map match-any VIDEOmatch cos 4match mpls experimental topmost 4match dscp ipv4 34match precedence ipv4 4
!
class-map match-any CRITICAL-DATA1match cos 3match mpls experimental topmost 3match dscp ipv4 26match precedence ipv4 3
!class-map match-any CRITICAL-DATA2match cos 2match mpls experimental topmost 2match dscp ipv4 18match precedence ipv4 2
!class-map match-any BUSINESS-HSImatch cos 1
match mpls experimental topmost 1match dscp ipv4 10match precedence ipv4 1
!
policy-map 10GE_OUT!! Real-time traffic is prioritized but only allows up to150Mbps!class REAL-TIMEpolice cir 150000000 conform-action transmit exceed-actiondroppriorityqueue-limit 20625 packets
!! Control traffic is guaranteed minimum bandwidth 1% ofinterface bandwidth!class CONTROLbandwidth percent 1
!!! Video traffic is guaranteed minimum bandwidth 30% ofinterface bandwidth!class VIDEObandwidth percent 30queue-limit 4278 packets
!! Critical-Data1 is guaranteed minimum bandwidth 30% ofinterface bandwidth! Using WRED for congestion avoidance!class CRITICAL-DATA1bandwidth percent 15random-detect aggregaterandom-detect precedence values 2 minimum-thresh 9375maximum-thresh 28125 mark-prob 1random-detect precedence values 3 minimum-thresh 15000maximum-thresh 45000 mark-prob 1
!! Critical-Data2 is guaranteed minimum bandwidth 10% ofinterface bandwidth
! Using WRED for congestion avoidance
7/25/2019 MEN21 Project Test 1.4
49/60
7-6-2015 Nghim thu dch v cho d n 48
!class CRITICAL-DATA2bandwidth percent 10random-detect aggregaterandom-detect precedence values 2 minimum-thresh 9375maximum-thresh 28125 mark-prob 1random-detect precedence values 3 minimum-thresh 15000
maximum-thresh 45000 mark-prob 1!! Business HSI is guaranteed minimum bandwidth 14% of interfacebandwidth! Using WRED for congestion avoidance!class BUSINESS-HSIbandwidth percent 14random-detect aggregaterandom-detect precedence values 0 minimum-thresh 4861maximum-thresh 14583 mark-prob 1random-detect precedence values 1 minimum-thresh 6944maximum-thresh 20833 mark-prob 1
!
! Any traffic that does not match 7 classes above is classifiedto classdefault.! Class-default uses Fair-queue and WRED and not is guaranteedbandwidth.!class class-defaultrandom-detect aggregaterandom-detect precedence values 0 minimum-thresh 4861maximum-thresh14583 mark-prob 1random-detect precedence values 1 minimum-thresh 6944maximum-thresh20833 mark-prob 1
!! Apply Policy-map onto each TenGigabit Interface towards U-PE
!or PE-Agg router!interface TenGigabitEthernet w/x/y/z1service-policy output 10GE_ES20_OUT!!interface TenGigabitEthernet w/x/y/z1service-policy output 10GE_ES20_OUT!commit!
Kt qu
mong mun
1. Ch c default-class b drop lc x y ra tc nghn
LAN Packet loss Latency Jitter50 < 0,0001%
7/25/2019 MEN21 Project Test 1.4
50/60
7-6-2015 Nghim thu dch v cho d n 49
2. Cc policy-map cu hnh trn cc router hot ng, kim tra bng lnh:showpolicy-map interface output
Kt qu
nh gi t Khng t t 1 phn Khng test
Ghi ch:
Xc nhn Ngy thng nm
I DIN CT-IN
CHC DANH
TN NGI I DIN
Ngy thng nm
I DIN VNPT
CHC DANH
TN NGI I DIN
7/25/2019 MEN21 Project Test 1.4
51/60
7-6-2015 Nghim thu dch v cho d n 50
6. Verify Security Configuration
TEST SETUP
Mc ch bi test - Kim tra kh nng bo vcontrol-plane
- Kim tra kh nng hn chARP request
- Kim tra kh nng gii hn gi tin hardware rate limiter
M t Cc c chb o mt c xy dng nhm ngn chn vic tn cng DDoS vo routeprocessor, cng nh hn chcc gi tin ARP attack v gi m cc gi tin multicast c xl trong bx l trung tm t i mc ngng cn thit. Chi tit cc bc thc hin bao gm :
Trn UPE Router 7600:- show policy-map control-plane: ki m tra cc loi gi tin c phn loi v xl
trong route processor.
- show mls qos arp: Hi n th thng tin v ARP entries c lu trong ARP table.
- show mls rate-limit usage : Kim tra trng thi gii hn cc loi gi tin c xl trong harware.
Trn ASR9k :
- Show lpts bindings : kim tra cc loi gi tin c phn loi v xl. RP/0/RSP0/CPU0:ASR#sh lpts bindings location 0/RSP0/CPU0 brief
Tue Mar 10 02:44:28.638 UTC
@ - Indirect binding; Sc - Scope
Clnt Sc L3 L4 VRF-ID Interface Local-
Address,Port Remote-Address,Port
---- -- ---- ------ -------------------- ------------ ------------
--------------------------
IPV4 LO IPV4 ICMP * any any,ECHO any
IPV4 LO IPV4 ICMP * any any,TSTAMP
any
IPV4 LO IPV4 ICMP * any any,MASKREQ
any
IPV6 LO IPV6 ICMP6 * any any,ECHOREQ
any
IPV6 LO IPV6 ICMP6 * any
any,NDRTRSLCT any
IPV6 LO IPV6 ICMP6 * any any,NDRTRADV
any
IPV6 LO IPV6 ICMP6 * any
any,NDNBRSLCT any
IPV6 LO IPV6 ICMP6 * any any,NDNBRADV
any
IPV6 LO IPV6 ICMP6 * any
any,NDREDIRECT any
7/25/2019 MEN21 Project Test 1.4
52/60
7-6-2015 Nghim thu dch v cho d n 51
BFD LO IPV4 UDP * any any any
TCP LR IPV4 TCP default any any,23 any
TCP LR IPV4 TCP default any any,646 any
UDP LR IPV4 UDP default any any,3503 any
UDP LR IPV4 UDP default any any,496 any
UDP LR IPV4 UDP default any any,3232 anyRAW LR IPV4 RAW default any any any
RAW LR IPV4 RAW default any any any
RAW LR IPV4 IGMP default any any any
RAW LR IPV4 IGMP default Te0/1/0/1 any any
RAW LR IPV4 IGMP default Te0/1/0/2 any any
RAW LR IPV4 IGMP default Lo0 any any
RAW LR IPV4 PIM default any any any
RAW LR IPV4 L2TPV3 default any any any
RAW LR IPV4 RSVP default any any any
RAW LR IPV4 RSVP default Te0/1/0/1 any any
RAW LR IPV4 RSVP default Te0/1/0/2 any any
CLNS LR CLNS - default Te0/1/0/1 - -
CLNS LR CLNS - default Gi0/0/1/9.99 - -
CLNS LR CLNS - default Te0/1/0/2 - -
CLNS LR CLNS - default Te0/1/0/0 - -
Phng tin o 01 Laptop/1 Router
Ngi test CTIN:
01 k s CTIN
Thng stest Ngy thc hin
Trm
Thit b
Kt qu
mong mun
1. Cc class c phn loi x l trong control-plane theo cc m c bng thng phhp, software counters v hardware counter hin th cc class c phn loi vc chuyn mch
2. Cc ARP entries lu trn ARP table m c gii hn 32000bps, m bo thng scc gi tin ARP tnh theo n v Byte c forward i trn cc linecard v nuvt qu 32000bps s c hn ch.
3. Tc gi i hn cho cc loi gi tin ng nh cu hnh
Kt qu
1. Cc class c phn loi x l trong control-plane theo cc m c bng thng phhp
2. Cc ARP entries lu trn ARP table m c gii hn 32000bps.
3. Tc gi i hn cho cc loi gi tin ng nh cu hnh
7/25/2019 MEN21 Project Test 1.4
53/60
7-6-2015 Nghim thu dch v cho d n 52
nh gi t Khng t t 1 phn Khng test
Chi ch:
Xc nhn Ngy thng nm
I DIN CT-IN
CHC DANH
TN NGI I DIN
Ngy thng nm
I DIN VNPT
CHC DANH
\
TN NGI I DIN
7/25/2019 MEN21 Project Test 1.4
54/60
7-6-2015 Nghim thu dch v cho d n 53
7. IPv6 Test
IPv6 over L2VPN
Mc ch bitest
Kim tra tnh nng IPv6 trn h th ng:
- Kh nng truyn ti IPv6 thng qua L2VPN.
M hnh mng
Cc bc thchin
- Cu hnh dch vELINE gi a U-PE 1 v U-PE 2- Tester 1 gil p 2 lu lng vi tham s nh sau:
o Lu lng IPv4 : a chngu n v ch s d ng IPv4. Speed : 200M,MTU : 1500
o Lu lng IPv6 : a chngu n v ch s d ng IPv6, speed : 200M,MTU :1500
- Tester 2 s th c hin vic loopback lu lng tr ngc vTester 1.
Cu hnh mu - Trn UPE-1 Router 7600:interface GigabitEthernet1/0/1mtu 1560
ip address 24.0.0.2 255.255.255.0ip router isisipv6 address 192:168:2::1/64ipv6 router isisno mls qos trustmpls ipisis circuit-type level-1isis network point-to-point
endrouter isisnet 49.0001.0020.0200.2002.00is-type level-1passive-interface Loopback0!address-family ipv6
7/25/2019 MEN21 Project Test 1.4
55/60
7-6-2015 Nghim thu dch v cho d n 54
redistribute connectedexit-address-family
!
- Trn ASR-1:
interface TenGigE0/1/0/1
cdpmtu 9014ipv4 mtu 9000ipv4 address 24.0.0.3 255.255.255.0ipv6 address 192:168:2::15/64load-interval 30dampening
!
router isis
set-overload-bit on-startup 180
is-type level-1
net 49.0092.1230.2906.0005.00
nsf ietf
lsp-gen-interval maximum-wait 5000 initial-wait 1 secondary-wait 50
lsp-refresh-interval 65000
max-lsp-lifetime 65535
address-family ipv4 unicast
metric-style wide
metric-style wide level 1
metric 100
ispf level 1
mpls traffic-eng level-1
mpls traffic-eng router-id Loopback0
mpls traffic-eng multicast-intact
spf-interval maximum-wait 50 initial-wait 5 secondary-wait 50
!interface Loopback0
passive
address-family ipv4 unicast
tag 1000
!
!
interface TenGigE0/1/0/1
circuit-type level-1
point-to-point
hello-password keychain ISIS
address-family ipv4 unicast
!
!
My o HST-3000
Ngi test
Thng stest Ngy thc hin
Trm
Thit b
7/25/2019 MEN21 Project Test 1.4
56/60
7-6-2015 Nghim thu dch v cho d n 55
Kt qu
mong mun
- Kt qu show cc tnh nng: - Tester gi v nhn c hai lu lng thnh cng.
Kt qu
nh gi t Khng t t 1 phn Khng test
Ghi ch:
Xc nhn Ngy thng nm .
I DIN CT-IN
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
7/25/2019 MEN21 Project Test 1.4
57/60
7-6-2015 Nghim thu dch v cho d n 56
IPv6 dual-stack
Mc ch bi
test
Kim tra tnh nng IPv6 trn h th ng:
- ICMPv6
- NDP
- Established IS-IS v6 Neighbor
- Bng nh tuyn IPv6
- Tnh nng truyn ti lu lng IPv4-IPv6 ng thi.
M hnh mng
Cc bc thc
hin
- Cu hnh a ch IPv6 trn cc Router.
- Cu hnh giao thc nh tuyn IS-IS htr IPv6.- Cu hnh nh tuyn IPv6 trn tt ccc interface c ch y IPv6.
- Kim tra cc thng strn Router v giao th c IPv6 S d ng cc lnh :
o Kim tra ICMPv6 :ping ipv6 x :x :x :x ::x
o Kim tra tnh nng NDP :show ipv6 interface gix/x/x
o Kim tra giao thc cho IPv6 :
Trn router 7600:
show ipv6 protocol
Trn router ASR9k:
Show ipv6 traffico Kim tra kh nng thit lp quan hIPv6 gi a cc router :show ipv6
neighbors
o Bng nh tuyn IPv6 :
Trn router 7600:
show ipv6 route isis
Trn ASR9k:
show route ipv6 isis
- Tester 1 gil p 2 lu lng vi tham s nh sau:
o Lu lng IPv4 : a chngu n v ch s d ng IPv4. Speed : 200M,MTU : 1500
o Lu lng IPv6 : a chngu n v ch s d ng IPv6, speed : 200M,MTU :1500
- Tester 2 s th c hin vic loopback lu lng tr ngc vTester 1.
Cu hnh mu - Trn UPE-1 Router 7600:interface GigabitEthernet1/0/1mtu 1560ip address 24.0.0.2 255.255.255.0ip router isisipv6 address 192:168:2::1/64
ipv6 router isis
7/25/2019 MEN21 Project Test 1.4
58/60
7-6-2015 Nghim thu dch v cho d n 57
no mls qos trustmpls ipisis circuit-type level-1isis network point-to-point
endrouter isisnet 49.0001.0020.0200.2002.00
is-type level-1passive-interface Loopback0!address-family ipv6redistribute connected
exit-address-family!
- Trn ASR-1:
interface TenGigE0/1/0/1cdpmtu 9014ipv4 mtu 9000
ipv4 address 24.0.0.3 255.255.255.0ipv6 address 192:168:2::15/64load-interval 30dampening
!
router isis
set-overload-bit on-startup 180
is-type level-1
net 49.0092.1230.2906.0005.00
nsf ietf
lsp-gen-interval maximum-wait 5000 initial-wait 1 secondary-wait 50
lsp-refresh-interval 65000
max-lsp-lifetime 65535
address-family ipv4 unicastmetric-style wide
metric-style wide level 1
metric 100
ispf level 1
mpls traffic-eng level-1
mpls traffic-eng router-id Loopback0
mpls traffic-eng multicast-intact
spf-interval maximum-wait 50 initial-wait 5 secondary-wait 50
!
interface Loopback0
passive
address-family ipv4 unicast
tag 1000
!
!
interface TenGigE0/1/0/1
circuit-type level-1
point-to-point
hello-password keychain ISIS
address-family ipv4 unicast
!
!
7/25/2019 MEN21 Project Test 1.4
59/60
7-6-2015 Nghim thu dch v cho d n 58
My o HST-3000
Ngi test
Thng stest Ngy thc hin
Trm
Thit b
Kt qu
mong mun
- Kt qu show cc tnh nng:ping ipv6 192:168:3::1
Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192:168:3::1, timeout is 2seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 0/0/4 ms
show ipv6 neighborsIPv6 Address Age Link-layer Addr StateInterfaceFE80::224:C4FF:FEDB:A240 8 0024.c4db.a240 STALEGi1/0/1192:168:2::2 9 0024.c4db.a240 STALEGi1/0/1
show ipv6 inter gi 1/0/1GigabitEthernet1/0/1 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::224:C4FF:FEDB:A3C0No Virtual link-local address(es):Global unicast address(es):
192:168:2::1, subnet is 192:168:2::/64Joined group address(es):FF02::1FF02::2FF02::1:FF00:1FF02::1:FFDB:A3C0
MTU is 1560 bytesICMP error messages limited to one every 100 millisecondsICMP redirects are enabledICMP unreachables are sentOutput features: HW Shortcut InstallationND DAD is enabled, number of DAD attempts: 1ND reachable time is 30000 millisecondsND advertised reachable time is 0 milliseconds
ND advertised retransmit interval is 0 millisecondsND router advertisements are sent every 200 secondsND router advertisements live for 1800 secondsND advertised default router preference is Medium
show ipv6 route isisIPv6 Routing Table - default - 6 entriesCodes: C - Connected, L - Local, S - Static, U - Per-user Staticroute
B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2IA - ISIS interarea, IS - ISIS summary, D - EIGRP, EX - EIGRP
externalO - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF
ext 2
7/25/2019 MEN21 Project Test 1.4
60/60
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2I1 192:168:3::/64 [115/20]
via FE80::224:C4FF:FEDB:A240, GigabitEthernet1/0/1
- Tester gi v nhn c hai lu lng thnh cng.
Kt qu
nh gi t Khng t t 1 phn Khng test
Ghi ch:
Xc nhn Ngy thng nm .
I DIN CT-IN
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN
Ngy thng .nm
I DIN VNPT
CHC DANH
TN NGI I DIN